repository icon
lm-sys / fastchat Project repository

An open platform for training, serving, and evaluating large language models. Release repo for Vicuna and Chatbot Arena.

Submit a report

FIRST INTERACTION

WITHIN32 DAYS

REVIEW

WITHIN32 DAYS

FIX

WITHINN/A DAYS

Open Redirection
akn00b
duplicate
Medium
HTML injection is discovered in lm-sys / fastchat
purpleteamframework
duplicate
Medium
Server-Side Request Forgery (SSRF) on register_worker.py
ralph13
duplicate
Medium
SSRF through serve controller
patrik-ha
duplicate
High
Server Side Request Forgery
oicu0619
High
•$450•CVE-2024-12376
Denial of service
oicu0619
duplicate
High
open redirect
oicu0619
duplicate
None
DoS by Sending Large Filename at File Upload Endpoint
mnqazi
High
•$450•CVE-2024-10912
IP Spoofing and Log Injection via get_ip() Function
zpbrent
informative
Medium
SSRF through register_worker and worker_generate_stream
ethansilvas
self closed
HTML injection in chatbox
ngostuan
not applicable
Server Side Request Forgery
mvlttt
duplicate
High
Server Side Request Forgery using CVE-2024-4325
mnqazi
High
•$450•CVE-2024-11603
SSRF in POST /worker_generate_stream API endpoint in Controller API Server
zpbrent
Critical
•$900•CVE-2024-10044
Open Redirect
mnqazi
Medium
•$75•CVE-2024-10908
DoS Via multipart boundry
mnqazi
High
•$450•CVE-2024-10907